Problem with 2.6.23.1-grsec and MySQL 5.0.32-7etch1

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Problem with 2.6.23.1-grsec and MySQL 5.0.32-7etch1

Postby Hal9000 » Mon Oct 29, 2007 7:01 pm

Hi!
I have been happily using the 2.6.21.6-grsec kernel with my debian etch machine, and yesterday I updated the kernel with a 2.6.23.1 using the latest grsec patch from October 12th, and since I rebooted I am experiencing a strange problem where the MySQL server would go down. It did four times in the past 24 hours (since I rebooted). This never happened before.
MySQL is version 5.0.32-7etch1, and as the version implies, it's running on a Debian Etch machine (32 bit). The kernel configuration basically remained the same.
In the syslog I can see this:

Code: Select all
Oct 29 14:41:29 fonzie mysqld[5206]: Version: '5.0.32-Debian_7etch1-log'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  Debian etch distribution
Oct 29 17:13:39 fonzie kernel: grsec: signal 11 sent to /usr/sbin/mysqld[mysqld:19691] uid/euid:103/103 gid/egid:105/105, parent /usr/bin/mysqld_safe[mysqld_safe:1650] uid/euid:0/0 gid/egid:0/0
Oct 29 17:13:39 fonzie mysqld[5206]: mysqld got signal 11;
Oct 29 17:13:39 fonzie mysqld[5206]: This could be because you hit a bug. It is also possible that this binary
Oct 29 17:13:39 fonzie mysqld[5206]: or one of the libraries it was linked against is corrupt, improperly built,
Oct 29 17:13:39 fonzie mysqld[5206]: or misconfigured. This error can also be caused by malfunctioning hardware.
Oct 29 17:13:39 fonzie mysqld[5206]: We will try our best to scrape up some info that will hopefully help diagnose
Oct 29 17:13:39 fonzie mysqld[5206]: the problem, but since we have already crashed, something is definitely wrong
Oct 29 17:13:39 fonzie mysqld[5206]: and this may fail.
Oct 29 17:13:39 fonzie mysqld[5206]:
Oct 29 17:13:39 fonzie mysqld[5206]: key_buffer_size=16777216
Oct 29 17:13:39 fonzie mysqld[5206]: read_buffer_size=131072
Oct 29 17:13:39 fonzie mysqld[5206]: max_used_connections=13
Oct 29 17:13:39 fonzie mysqld[5206]: max_connections=100
Oct 29 17:13:39 fonzie mysqld[5206]: threads_connected=4
Oct 29 17:13:39 fonzie mysqld[5206]: It is possible that mysqld could use up to
Oct 29 17:13:39 fonzie mysqld[5206]: key_buffer_size + (read_buffer_size + sort_buffer_size)*max_connections = 233983 K
Oct 29 17:13:39 fonzie mysqld[5206]: bytes of memory
Oct 29 17:13:39 fonzie mysqld[5206]: Hope that's ok; if not, decrease some variables in the equation.
Oct 29 17:13:39 fonzie mysqld[5206]:
Oct 29 17:13:39 fonzie mysqld[5206]: thd=0x8c63e08
Oct 29 17:13:39 fonzie mysqld[5206]: Attempting backtrace. You can use the following information to find out
Oct 29 17:13:39 fonzie mysqld[5206]: where mysqld died. If you see no messages after this, something went
Oct 29 17:13:39 fonzie mysqld[5206]: terribly wrong...
Oct 29 17:13:39 fonzie mysqld[5206]: Cannot determine thread, fp=0xb40a5b18, backtrace may not be correct.
Oct 29 17:13:39 fonzie mysqld[5206]: Stack range sanity check OK, backtrace follows:
Oct 29 17:13:39 fonzie mysqld[5206]: 0x81c0659
Oct 29 17:13:39 fonzie mysqld[5206]: 0x847a75a
Oct 29 17:13:39 fonzie mysqld[5206]: 0x847a591
Oct 29 17:13:39 fonzie mysqld[5206]: 0x82705e1
Oct 29 17:13:39 fonzie mysqld[5206]: 0x821424b
Oct 29 17:13:39 fonzie mysqld[5206]: 0x8209e85
Oct 29 17:13:39 fonzie mysqld[5206]: 0x820fc37
Oct 29 17:13:39 fonzie mysqld[5206]: 0x8209e85
Oct 29 17:13:39 fonzie mysqld[5206]: 0x820fc37
Oct 29 17:13:39 fonzie mysqld[5206]: 0x8213997
Oct 29 17:13:39 fonzie mysqld[5206]: 0x821fefd
Oct 29 17:13:39 fonzie mysqld[5206]: 0x8221c20
Oct 29 17:13:39 fonzie mysqld[5206]: 0x822248e
Oct 29 17:13:39 fonzie mysqld[5206]: 0x81d74a5
Oct 29 17:13:39 fonzie mysqld[5206]: 0x81dba17
Oct 29 17:13:39 fonzie mysqld[5206]: 0x81dbed0
Oct 29 17:13:39 fonzie mysqld[5206]: 0x81dd198
Oct 29 17:13:39 fonzie mysqld[5206]: 0x81ddba4
Oct 29 17:13:39 fonzie mysqld[5206]: 0xb7f86240
Oct 29 17:13:39 fonzie mysqld[5206]: 0xb7dc14ae
Oct 29 17:13:39 fonzie mysqld[5206]: New value of fp=(nil) failed sanity check, terminating stack trace!
Oct 29 17:13:39 fonzie mysqld[5206]: Please read http://dev.mysql.com/doc/mysql/en/using-stack-trace.html and follow instructions on how to resolve the stack trace. Resolved
Oct 29 17:13:39 fonzie mysqld[5206]: stack trace is much more helpful in diagnosing the problem, so please do
Oct 29 17:13:39 fonzie mysqld[5206]: resolve it
Oct 29 17:13:39 fonzie mysqld[5206]: Trying to get some variables.
Oct 29 17:13:39 fonzie mysqld[5206]: Some pointers may be invalid and cause the dump to abort...
Oct 29 17:13:39 fonzie mysqld[5206]: thd->query at 0x8beced0 = SELECT a.aid, count( p.pid )  AS pic_count, max( p.pid )  AS last_pid, max( p.ctime )  AS last_upload, a.keyword FROM cpg140_albums AS a  LEFT JOIN cpg140_pictures AS p ON a.aid = p.aid AND p.approved =  'YES' WHERE a.aid IN (23, 24, 1, 2, 3, 37, 5, 6, 7, 8, 9, 25)GROUP BY a.aid
Oct 29 17:13:39 fonzie mysqld[5206]: thd->thread_id=6614
Oct 29 17:13:39 fonzie mysqld[5206]: The manual page at http://www.mysql.com/doc/en/Crashing.html contains
Oct 29 17:13:39 fonzie mysqld[5206]: information that should help you find out what is causing the crash.
Oct 29 17:13:39 fonzie mysqld_safe[23338]: Number of processes running now: 0
Oct 29 17:13:39 fonzie mysqld_safe[23340]: restarted
Oct 29 17:13:39 fonzie mysqld[23343]: 071029 17:13:39  InnoDB: Database was not shut down normally!
Oct 29 17:13:39 fonzie mysqld[23343]: InnoDB: Starting crash recovery.
Oct 29 17:13:39 fonzie mysqld[23343]: InnoDB: Reading tablespace information from the .ibd files...
Oct 29 17:13:39 fonzie mysqld[23343]: InnoDB: Restoring possible half-written data pages from the doublewrite
Oct 29 17:13:39 fonzie mysqld[23343]: InnoDB: buffer...
Oct 29 17:13:39 fonzie mysqld[23343]: 071029 17:13:39  InnoDB: Starting log scan based on checkpoint at
Oct 29 17:13:39 fonzie mysqld[23343]: InnoDB: log sequence number 0 1501827680.
Oct 29 17:13:39 fonzie mysqld[23343]: InnoDB: Doing recovery: scanned up to log sequence number 0 1501827680
Oct 29 17:13:39 fonzie mysqld[23343]: InnoDB: Last MySQL binlog file position 0 1885978, file name /var/log/mysql/mysql-bin.000453
Oct 29 17:13:39 fonzie mysqld[23343]: 071029 17:13:39  InnoDB: Started; log sequence number 0 1501827680
Oct 29 17:13:39 fonzie mysqld[23343]: 071029 17:13:39 [Note] Recovering after a crash using /var/log/mysql/mysql-bin
Oct 29 17:13:39 fonzie mysqld[23343]: 071029 17:13:39 [Note] Starting crash recovery...
Oct 29 17:13:39 fonzie mysqld[23343]: 071029 17:13:39 [Note] Crash recovery finished.
Oct 29 17:13:39 fonzie mysqld[23343]: 071029 17:13:39 [Note] /usr/sbin/mysqld: ready for connections.
Oct 29 17:13:39 fonzie mysqld[23343]: Version: '5.0.32-Debian_7etch1-log'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  Debian etch distribution
Oct 29 18:45:15 fonzie mysqld[23343]: 071029 18:45:15 [ERROR] /usr/sbin/mysqld: Incorrect key file for table './mysql52dccf90644ba2722815ebe5811/phpbb_search_wordmatch.MYI'; try to repair it
Oct 29 18:50:22 fonzie mysqld[23343]: ^G/usr/sbin/mysqld: Out of memory (Needed 5276 bytes)
Oct 29 18:50:22 fonzie relaylock: /var/qmail/bin/relaylock: Unable to connect to the mysql database, relay will work in closed mode & white list will not work
Oct 29 18:50:22 fonzie mysqld_safe[1639]: Number of processes running now: 0
Oct 29 18:50:22 fonzie mysqld_safe[1641]: restarted
Oct 29 18:50:22 fonzie mysqld[1644]: 071029 18:50:22  InnoDB: Database was not shut down normally!
Oct 29 18:50:22 fonzie mysqld[1644]: InnoDB: Starting crash recovery.
Oct 29 18:50:22 fonzie mysqld[1644]: InnoDB: Reading tablespace information from the .ibd files...
Oct 29 18:50:23 fonzie mysqld[1644]: InnoDB: Restoring possible half-written data pages from the doublewrite
Oct 29 18:50:23 fonzie mysqld[1644]: InnoDB: buffer...
Oct 29 18:50:23 fonzie mysqld[1644]: 071029 18:50:23  InnoDB: Starting log scan based on checkpoint at
Oct 29 18:50:23 fonzie mysqld[1644]: InnoDB: log sequence number 0 1501827700.
Oct 29 18:50:23 fonzie mysqld[1644]: InnoDB: Doing recovery: scanned up to log sequence number 0 1501827700
Oct 29 18:50:23 fonzie mysqld[1644]: InnoDB: Last MySQL binlog file position 0 1885978, file name /var/log/mysql/mysql-bin.000453
Oct 29 18:50:23 fonzie mysqld[1644]: 071029 18:50:23  InnoDB: Started; log sequence number 0 1501827700
Oct 29 18:50:23 fonzie mysqld[1644]: 071029 18:50:23 [Note] Recovering after a crash using /var/log/mysql/mysql-bin
Oct 29 18:50:23 fonzie mysqld[1644]: 071029 18:50:23 [Note] Starting crash recovery...
Oct 29 18:50:23 fonzie mysqld[1644]: 071029 18:50:23 [Note] Crash recovery finished.
Oct 29 18:50:23 fonzie mysqld[1644]: 071029 18:50:23 [Note] /usr/sbin/mysqld: ready for connections.
Oct 29 18:50:23 fonzie mysqld[1644]: Version: '5.0.32-Debian_7etch1-log'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  Debian etch distribution
Oct 29 21:44:51 fonzie mysqld[1644]: 071029 21:44:51 [ERROR] /usr/sbin/mysqld: Table './mysql52dccf90644ba2722815ebe5811/phpbb_search_wordmatch' is marked as crashed and should be repaired
Oct 29 21:44:51 fonzie mysqld[1644]: 071029 21:44:51 [ERROR] /usr/sbin/mysqld: Table './mysql52dccf90644ba2722815ebe5811/phpbb_search_wordmatch' is marked as crashed and should be repaired
Oct 29 21:56:49 fonzie mysqld[1644]: ^G/usr/sbin/mysqld: Out of memory (Needed 5276 bytes)
Oct 29 21:56:50 fonzie mysqld_safe[15947]: Number of processes running now: 0
Oct 29 21:56:50 fonzie mysqld_safe[15949]: restarted
Oct 29 21:56:50 fonzie mysqld[15952]: 071029 21:56:50  InnoDB: Database was not shut down normally!
Oct 29 21:56:50 fonzie mysqld[15952]: InnoDB: Starting crash recovery.
Oct 29 21:56:50 fonzie mysqld[15952]: InnoDB: Reading tablespace information from the .ibd files...
Oct 29 21:56:50 fonzie relaylock: /var/qmail/bin/relaylock: Unable to connect to the mysql database, relay will work in closed mode & white list will not work
Oct 29 21:56:50 fonzie mysqld[15952]: InnoDB: Restoring possible half-written data pages from the doublewrite
Oct 29 21:56:50 fonzie mysqld[15952]: InnoDB: buffer...
Oct 29 21:56:50 fonzie mysqld[15952]: 071029 21:56:50  InnoDB: Starting log scan based on checkpoint at
Oct 29 21:56:50 fonzie mysqld[15952]: InnoDB: log sequence number 0 1501827720.
Oct 29 21:56:50 fonzie mysqld[15952]: InnoDB: Doing recovery: scanned up to log sequence number 0 1501827720
Oct 29 21:56:50 fonzie mysqld[15952]: InnoDB: Last MySQL binlog file position 0 1885978, file name /var/log/mysql/mysql-bin.000453
Oct 29 21:56:50 fonzie mysqld[15952]: 071029 21:56:50  InnoDB: Started; log sequence number 0 1501827720
Oct 29 21:56:50 fonzie mysqld[15952]: 071029 21:56:50 [Note] Recovering after a crash using /var/log/mysql/mysql-bin
Oct 29 21:56:50 fonzie mysqld[15952]: 071029 21:56:50 [Note] Starting crash recovery...
Oct 29 21:56:50 fonzie mysqld[15952]: 071029 21:56:50 [Note] Crash recovery finished.
Oct 29 21:56:50 fonzie mysqld[15952]: 071029 21:56:50 [Note] /usr/sbin/mysqld: ready for connections.
Oct 29 21:56:50 fonzie mysqld[15952]: Version: '5.0.32-Debian_7etch1-log'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  Debian etch distribution
Oct 29 22:30:59 fonzie mysqld[15952]: 071029 22:30:59 [ERROR] /usr/sbin/mysqld: Table './mysql52dccf90644ba2722815ebe5811/phpbb_search_wordmatch' is marked as crashed and should be repaired
Oct 29 22:30:59 fonzie mysqld[15952]: 071029 22:30:59 [ERROR] /usr/sbin/mysqld: Table './mysql52dccf90644ba2722815ebe5811/phpbb_search_wordmatch' is marked as crashed and should be repaired
Oct 30 00:25:38 fonzie mysqld[15952]: 071030  0:25:38 [ERROR] /usr/sbin/mysqld: Table './mysql52dccf90644ba2722815ebe5811/phpbb_search_wordmatch' is marked as crashed and should be repaired
Oct 30 00:25:38 fonzie mysqld[15952]: 071030  0:25:38 [ERROR] /usr/sbin/mysqld: Table './mysql52dccf90644ba2722815ebe5811/phpbb_search_wordmatch' is marked as crashed and should be repaired


Any ideas?
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby Hal9000 » Mon Oct 29, 2007 7:07 pm

By the way, I just repaired that crashed table.
But I don't think it was the root cause of the problem, or was it?
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby Hal9000 » Tue Oct 30, 2007 2:57 am

the problem is still there:

Code: Select all
Oct 30 01:15:02 fonzie mysqld[30908]: Version: '5.0.32-Debian_7etch1-log'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  Debian etch distribution
Oct 30 05:13:18 fonzie relaylock: /var/qmail/bin/relaylock: Unable to connect to the mysql database, relay will work in closed mode & white list will not work
Oct 30 06:09:46 fonzie kernel: grsec: signal 11 sent to /usr/sbin/mysqld[mysqld:1001] uid/euid:103/103 gid/egid:105/105, parent /usr/bin/mysqld_safe[mysqld_safe:1650] uid/euid:0/0 gid/egid:0/0
Oct 30 06:09:46 fonzie mysqld[30908]: mysqld got signal 11;
Oct 30 06:09:46 fonzie mysqld[30908]: This could be because you hit a bug. It is also possible that this binary
Oct 30 06:09:46 fonzie mysqld[30908]: or one of the libraries it was linked against is corrupt, improperly built,
Oct 30 06:09:46 fonzie mysqld[30908]: or misconfigured. This error can also be caused by malfunctioning hardware.
Oct 30 06:09:46 fonzie mysqld[30908]: We will try our best to scrape up some info that will hopefully help diagnose
Oct 30 06:09:46 fonzie mysqld[30908]: the problem, but since we have already crashed, something is definitely wrong
Oct 30 06:09:46 fonzie mysqld[30908]: and this may fail.
Oct 30 06:09:46 fonzie mysqld[30908]:
Oct 30 06:09:46 fonzie mysqld[30908]: key_buffer_size=16777216
Oct 30 06:09:46 fonzie mysqld[30908]: read_buffer_size=131072
Oct 30 06:09:46 fonzie mysqld[30908]: max_used_connections=11
Oct 30 06:09:46 fonzie mysqld[30908]: max_connections=100
Oct 30 06:09:46 fonzie mysqld[30908]: threads_connected=6
Oct 30 06:09:46 fonzie mysqld[30908]: It is possible that mysqld could use up to
Oct 30 06:09:46 fonzie mysqld[30908]: key_buffer_size + (read_buffer_size + sort_buffer_size)*max_connections = 233983 K
Oct 30 06:09:46 fonzie mysqld[30908]: bytes of memory
Oct 30 06:09:46 fonzie mysqld[30908]: Hope that's ok; if not, decrease some variables in the equation.
Oct 30 06:09:46 fonzie mysqld[30908]:
Oct 30 06:09:46 fonzie mysqld[30908]: thd=0x8c73218
Oct 30 06:09:46 fonzie mysqld[30908]: Attempting backtrace. You can use the following information to find out
Oct 30 06:09:46 fonzie mysqld[30908]: where mysqld died. If you see no messages after this, something went
Oct 30 06:09:46 fonzie mysqld[30908]: terribly wrong...
Oct 30 06:09:46 fonzie mysqld[30908]: Cannot determine thread, fp=0xb3edcb78, backtrace may not be correct.
Oct 30 06:09:46 fonzie mysqld[30908]: Stack range sanity check OK, backtrace follows:
Oct 30 06:09:46 fonzie mysqld[30908]: 0x81c0659
Oct 30 06:09:46 fonzie mysqld[30908]: 0x847a75a
Oct 30 06:09:46 fonzie mysqld[30908]: 0x847a591
Oct 30 06:09:46 fonzie mysqld[30908]: 0x82705e1
Oct 30 06:09:46 fonzie mysqld[30908]: 0x821443e
Oct 30 06:09:46 fonzie mysqld[30908]: 0x8209e85
Oct 30 06:09:46 fonzie mysqld[30908]: 0x820fc37
Oct 30 06:09:46 fonzie mysqld[30908]: 0x8213997
Oct 30 06:09:46 fonzie mysqld[30908]: 0x821fefd
Oct 30 06:09:46 fonzie mysqld[30908]: 0x8221c20
Oct 30 06:09:46 fonzie mysqld[30908]: 0x822248e
Oct 30 06:09:46 fonzie mysqld[30908]: 0x81d74a5
Oct 30 06:09:46 fonzie mysqld[30908]: 0x81dba17
Oct 30 06:09:46 fonzie mysqld[30908]: 0x81dbed0
Oct 30 06:09:46 fonzie mysqld[30908]: 0x81dd198
Oct 30 06:09:46 fonzie mysqld[30908]: 0x81ddba4
Oct 30 06:09:46 fonzie mysqld[30908]: 0xb7eae240
Oct 30 06:09:46 fonzie mysqld[30908]: 0xb7ce94ae
Oct 30 06:09:46 fonzie mysqld[30908]: New value of fp=(nil) failed sanity check, terminating stack trace!
Oct 30 06:09:46 fonzie mysqld[30908]: Please read http://dev.mysql.com/doc/mysql/en/using-stack-trace.html and follow instructions on how to resolve the stack trace. Resolved
Oct 30 06:09:46 fonzie mysqld[30908]: stack trace is much more helpful in diagnosing the problem, so please do
Oct 30 06:09:46 fonzie mysqld[30908]: resolve it
Oct 30 06:09:46 fonzie mysqld[30908]: Trying to get some variables.
Oct 30 06:09:46 fonzie mysqld[30908]: Some pointers may be invalid and cause the dump to abort...
Oct 30 06:09:46 fonzie mysqld[30908]: thd->query at 0x8c3e4c0 = SELECT DISTINCT DAYOFMONTH(post_date)
Oct 30 06:09:46 fonzie mysqld[30908]: ^I^IFROM wp_posts WHERE MONTH(post_date) = '10'
Oct 30 06:09:46 fonzie mysqld[30908]: ^I^IAND YEAR(post_date) = '2007'
Oct 30 06:09:46 fonzie mysqld[30908]: ^I^IAND post_type = 'post' AND post_status = 'publish'
Oct 30 06:09:46 fonzie mysqld[30908]: ^I^IAND post_date < '2007-10-30 07:09:46'
Oct 30 06:09:46 fonzie mysqld[30908]: thd->thread_id=7330
Oct 30 06:09:46 fonzie mysqld[30908]: The manual page at http://www.mysql.com/doc/en/Crashing.html contains
Oct 30 06:09:46 fonzie mysqld[30908]: information that should help you find out what is causing the crash.
Oct 30 06:09:46 fonzie mysqld_safe[22102]: Number of processes running now: 0
Oct 30 06:09:46 fonzie mysqld_safe[22104]: restarted
Oct 30 06:09:46 fonzie mysqld[22107]: 071030  6:09:46  InnoDB: Database was not shut down normally!
Oct 30 06:09:46 fonzie mysqld[22107]: InnoDB: Starting crash recovery.
Oct 30 06:09:46 fonzie mysqld[22107]: InnoDB: Reading tablespace information from the .ibd files...
Oct 30 06:09:46 fonzie mysqld[22107]: InnoDB: Restoring possible half-written data pages from the doublewrite
Oct 30 06:09:46 fonzie mysqld[22107]: InnoDB: buffer...
Oct 30 06:09:46 fonzie mysqld[22107]: 071030  6:09:46  InnoDB: Starting log scan based on checkpoint at
Oct 30 06:09:46 fonzie mysqld[22107]: InnoDB: log sequence number 0 1501841312.
Oct 30 06:09:46 fonzie mysqld[22107]: InnoDB: Doing recovery: scanned up to log sequence number 0 1501841312
Oct 30 06:09:46 fonzie mysqld[22107]: InnoDB: Last MySQL binlog file position 0 1089940, file name /var/log/mysql/mysql-bin.000463
Oct 30 06:09:46 fonzie mysqld[22107]: 071030  6:09:46  InnoDB: Started; log sequence number 0 1501841312
Oct 30 06:09:46 fonzie mysqld[22107]: 071030  6:09:46 [Note] Recovering after a crash using /var/log/mysql/mysql-bin
Oct 30 06:09:46 fonzie mysqld[22107]: 071030  6:09:46 [Note] Starting crash recovery...
Oct 30 06:09:46 fonzie mysqld[22107]: 071030  6:09:46 [Note] Crash recovery finished.
Oct 30 06:09:47 fonzie mysqld[22107]: 071030  6:09:47 [Note] /usr/sbin/mysqld: ready for connections.
Oct 30 06:09:47 fonzie mysqld[22107]: Version: '5.0.32-Debian_7etch1-log'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  Debian etch distribution


I guess I'm gonna reboot into 2.6.21.6-grsec again, if I can't solve this problem today...

hal
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby Hal9000 » Tue Oct 30, 2007 4:20 am

oh, i forgot my kernel config:

Code: Select all
#
# Automatically generated make config: don't edit
# Linux kernel version: 2.6.23.1
# Sun Oct 28 16:47:34 2007
#
CONFIG_X86_32=y
CONFIG_GENERIC_TIME=y
CONFIG_GENERIC_CMOS_UPDATE=y
CONFIG_CLOCKSOURCE_WATCHDOG=y
CONFIG_GENERIC_CLOCKEVENTS=y
CONFIG_LOCKDEP_SUPPORT=y
CONFIG_STACKTRACE_SUPPORT=y
CONFIG_SEMAPHORE_SLEEPERS=y
CONFIG_X86=y
CONFIG_MMU=y
CONFIG_ZONE_DMA=y
CONFIG_QUICKLIST=y
CONFIG_GENERIC_ISA_DMA=y
CONFIG_GENERIC_IOMAP=y
CONFIG_GENERIC_BUG=y
CONFIG_GENERIC_HWEIGHT=y
CONFIG_ARCH_MAY_HAVE_PC_FDC=y
CONFIG_DMI=y
CONFIG_DEFCONFIG_LIST="/lib/modules/$UNAME_RELEASE/.config"

#
# General setup
#
# CONFIG_EXPERIMENTAL is not set
CONFIG_BROKEN_ON_SMP=y
CONFIG_INIT_ENV_ARG_LIMIT=32
CONFIG_LOCALVERSION=""
# CONFIG_LOCALVERSION_AUTO is not set
CONFIG_SWAP=y
CONFIG_SYSVIPC=y
CONFIG_SYSVIPC_SYSCTL=y
# CONFIG_BSD_PROCESS_ACCT is not set
# CONFIG_TASKSTATS is not set
# CONFIG_AUDIT is not set
# CONFIG_IKCONFIG is not set
CONFIG_LOG_BUF_SHIFT=14
# CONFIG_SYSFS_DEPRECATED is not set
# CONFIG_RELAY is not set
# CONFIG_BLK_DEV_INITRD is not set
CONFIG_SYSCTL=y
# CONFIG_EMBEDDED is not set
CONFIG_UID16=y
CONFIG_SYSCTL_SYSCALL=y
CONFIG_HOTPLUG=y
CONFIG_PRINTK=y
CONFIG_BUG=y
CONFIG_ELF_CORE=y
CONFIG_BASE_FULL=y
CONFIG_FUTEX=y
CONFIG_ANON_INODES=y
CONFIG_EPOLL=y
CONFIG_SIGNALFD=y
CONFIG_EVENTFD=y
CONFIG_SHMEM=y
CONFIG_VM_EVENT_COUNTERS=y
CONFIG_SLAB=y
# CONFIG_SLUB is not set
# CONFIG_SLOB is not set
CONFIG_RT_MUTEXES=y
# CONFIG_TINY_SHMEM is not set
CONFIG_BASE_SMALL=0
# CONFIG_MODULES is not set
CONFIG_BLOCK=y
# CONFIG_LBD is not set
# CONFIG_BLK_DEV_IO_TRACE is not set
# CONFIG_LSF is not set

#
# IO Schedulers
#
CONFIG_IOSCHED_NOOP=y
CONFIG_IOSCHED_AS=y
# CONFIG_IOSCHED_DEADLINE is not set
# CONFIG_IOSCHED_CFQ is not set
CONFIG_DEFAULT_AS=y
# CONFIG_DEFAULT_DEADLINE is not set
# CONFIG_DEFAULT_CFQ is not set
# CONFIG_DEFAULT_NOOP is not set
CONFIG_DEFAULT_IOSCHED="anticipatory"

#
# Processor type and features
#
CONFIG_TICK_ONESHOT=y
CONFIG_NO_HZ=y
CONFIG_HIGH_RES_TIMERS=y
# CONFIG_SMP is not set
CONFIG_X86_PC=y
# CONFIG_X86_ELAN is not set
# CONFIG_X86_VOYAGER is not set
# CONFIG_X86_NUMAQ is not set
# CONFIG_X86_SUMMIT is not set
# CONFIG_X86_BIGSMP is not set
# CONFIG_X86_VISWS is not set
# CONFIG_X86_GENERICARCH is not set
# CONFIG_X86_ES7000 is not set
# CONFIG_M386 is not set
# CONFIG_M486 is not set
# CONFIG_M586 is not set
# CONFIG_M586TSC is not set
# CONFIG_M586MMX is not set
# CONFIG_M686 is not set
# CONFIG_MPENTIUMII is not set
# CONFIG_MPENTIUMIII is not set
# CONFIG_MPENTIUMM is not set
# CONFIG_MCORE2 is not set
# CONFIG_MPENTIUM4 is not set
# CONFIG_MK6 is not set
# CONFIG_MK7 is not set
CONFIG_MK8=y
# CONFIG_MCRUSOE is not set
# CONFIG_MEFFICEON is not set
# CONFIG_MWINCHIPC6 is not set
# CONFIG_MWINCHIP2 is not set
# CONFIG_MWINCHIP3D is not set
# CONFIG_MGEODEGX1 is not set
# CONFIG_MGEODE_LX is not set
# CONFIG_MCYRIXIII is not set
# CONFIG_MVIAC3_2 is not set
# CONFIG_MVIAC7 is not set
# CONFIG_X86_GENERIC is not set
CONFIG_X86_CMPXCHG=y
CONFIG_X86_L1_CACHE_SHIFT=6
CONFIG_X86_XADD=y
CONFIG_RWSEM_XCHGADD_ALGORITHM=y
# CONFIG_ARCH_HAS_ILOG2_U32 is not set
# CONFIG_ARCH_HAS_ILOG2_U64 is not set
CONFIG_GENERIC_CALIBRATE_DELAY=y
CONFIG_X86_WP_WORKS_OK=y
CONFIG_X86_INVLPG=y
CONFIG_X86_BSWAP=y
CONFIG_X86_POPAD_OK=y
CONFIG_X86_ALIGNMENT_16=y
CONFIG_X86_GOOD_APIC=y
CONFIG_X86_INTEL_USERCOPY=y
CONFIG_X86_USE_PPRO_CHECKSUM=y
CONFIG_X86_TSC=y
CONFIG_X86_MINIMUM_CPU_FAMILY=4
CONFIG_HPET_TIMER=y
CONFIG_HPET_EMULATE_RTC=y
CONFIG_PREEMPT_NONE=y
# CONFIG_PREEMPT_VOLUNTARY is not set
# CONFIG_PREEMPT is not set
# CONFIG_X86_UP_APIC is not set
CONFIG_X86_MCE=y
# CONFIG_X86_MCE_NONFATAL is not set
CONFIG_VM86=y
# CONFIG_TOSHIBA is not set
# CONFIG_I8K is not set
# CONFIG_X86_REBOOTFIXUPS is not set
# CONFIG_MICROCODE is not set
# CONFIG_X86_MSR is not set
# CONFIG_X86_CPUID is not set

#
# Firmware Drivers
#
# CONFIG_EDD is not set
# CONFIG_DELL_RBU is not set
# CONFIG_DCDBAS is not set
# CONFIG_DMIID is not set
# CONFIG_NOHIGHMEM is not set
CONFIG_HIGHMEM4G=y
# CONFIG_HIGHMEM64G is not set
CONFIG_PAGE_OFFSET=0xC0000000
CONFIG_HIGHMEM=y
CONFIG_ARCH_POPULATES_NODE_MAP=y
CONFIG_FLATMEM=y
CONFIG_FLAT_NODE_MEM_MAP=y
# CONFIG_SPARSEMEM_STATIC is not set
CONFIG_SPLIT_PTLOCK_CPUS=4
# CONFIG_RESOURCES_64BIT is not set
CONFIG_ZONE_DMA_FLAG=1
CONFIG_BOUNCE=y
CONFIG_NR_QUICK=1
CONFIG_VIRT_TO_BUS=y
# CONFIG_HIGHPTE is not set
# CONFIG_MATH_EMULATION is not set
# CONFIG_MTRR is not set
CONFIG_SECCOMP=y
CONFIG_HZ_100=y
# CONFIG_HZ_250 is not set
# CONFIG_HZ_300 is not set
# CONFIG_HZ_1000 is not set
CONFIG_HZ=100
# CONFIG_KEXEC is not set
CONFIG_PHYSICAL_START=0x200000
CONFIG_PHYSICAL_ALIGN=0x100000
# CONFIG_COMPAT_VDSO is not set
CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y

#
# Power management options (ACPI, APM)
#
# CONFIG_PM is not set
CONFIG_SUSPEND_UP_POSSIBLE=y
CONFIG_HIBERNATION_UP_POSSIBLE=y

#
# CPU Frequency scaling
#
# CONFIG_CPU_FREQ is not set

#
# Bus options (PCI, PCMCIA, EISA, MCA, ISA)
#
CONFIG_PCI=y
# CONFIG_PCI_GOBIOS is not set
# CONFIG_PCI_GOMMCONFIG is not set
CONFIG_PCI_GODIRECT=y
# CONFIG_PCI_GOANY is not set
CONFIG_PCI_DIRECT=y
CONFIG_PCIEPORTBUS=y
# CONFIG_PCIEAER is not set
# CONFIG_ARCH_SUPPORTS_MSI is not set
CONFIG_ISA_DMA_API=y
# CONFIG_ISA is not set
# CONFIG_MCA is not set
# CONFIG_SCx200 is not set

#
# PCCARD (PCMCIA/CardBus) support
#
# CONFIG_PCCARD is not set

#
# Executable file formats
#
CONFIG_BINFMT_ELF=y
# CONFIG_BINFMT_AOUT is not set
CONFIG_BINFMT_MISC=y

#
# Networking
#
CONFIG_NET=y

#
# Networking options
#
CONFIG_PACKET=y
CONFIG_PACKET_MMAP=y
CONFIG_UNIX=y
# CONFIG_NET_KEY is not set
CONFIG_INET=y
# CONFIG_IP_MULTICAST is not set
CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_ASK_IP_FIB_HASH=y
# CONFIG_IP_FIB_TRIE is not set
CONFIG_IP_FIB_HASH=y
# CONFIG_IP_MULTIPLE_TABLES is not set
# CONFIG_IP_ROUTE_MULTIPATH is not set
# CONFIG_IP_ROUTE_VERBOSE is not set
# CONFIG_IP_PNP is not set
# CONFIG_NET_IPIP is not set
# CONFIG_NET_IPGRE is not set
# CONFIG_SYN_COOKIES is not set
# CONFIG_INET_AH is not set
# CONFIG_INET_ESP is not set
# CONFIG_INET_IPCOMP is not set
# CONFIG_INET_XFRM_TUNNEL is not set
# CONFIG_INET_TUNNEL is not set
# CONFIG_INET_XFRM_MODE_TRANSPORT is not set
# CONFIG_INET_XFRM_MODE_TUNNEL is not set
# CONFIG_INET_XFRM_MODE_BEET is not set
# CONFIG_INET_DIAG is not set
# CONFIG_TCP_CONG_ADVANCED is not set
CONFIG_TCP_CONG_CUBIC=y
CONFIG_DEFAULT_TCP_CONG="cubic"
# CONFIG_IP_VS is not set
# CONFIG_IPV6 is not set
# CONFIG_INET6_XFRM_TUNNEL is not set
# CONFIG_INET6_TUNNEL is not set
# CONFIG_NETWORK_SECMARK is not set
CONFIG_NETFILTER=y
# CONFIG_NETFILTER_DEBUG is not set

#
# Core Netfilter Configuration
#
# CONFIG_NETFILTER_NETLINK is not set
CONFIG_NF_CONNTRACK_ENABLED=y
CONFIG_NF_CONNTRACK=y
# CONFIG_NF_CT_ACCT is not set
# CONFIG_NF_CONNTRACK_MARK is not set
# CONFIG_NF_CONNTRACK_AMANDA is not set
CONFIG_NF_CONNTRACK_FTP=y
CONFIG_NF_CONNTRACK_IRC=y
# CONFIG_NF_CONNTRACK_PPTP is not set
# CONFIG_NF_CONNTRACK_TFTP is not set
CONFIG_NETFILTER_XTABLES=y
# CONFIG_NETFILTER_XT_TARGET_CLASSIFY is not set
# CONFIG_NETFILTER_XT_TARGET_CONNMARK is not set
# CONFIG_NETFILTER_XT_TARGET_DSCP is not set
# CONFIG_NETFILTER_XT_TARGET_MARK is not set
# CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set
# CONFIG_NETFILTER_XT_TARGET_NFLOG is not set
# CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set
# CONFIG_NETFILTER_XT_MATCH_COMMENT is not set
# CONFIG_NETFILTER_XT_MATCH_CONNBYTES is not set
# CONFIG_NETFILTER_XT_MATCH_CONNLIMIT is not set
# CONFIG_NETFILTER_XT_MATCH_CONNMARK is not set
# CONFIG_NETFILTER_XT_MATCH_CONNTRACK is not set
# CONFIG_NETFILTER_XT_MATCH_DCCP is not set
# CONFIG_NETFILTER_XT_MATCH_DSCP is not set
# CONFIG_NETFILTER_XT_MATCH_ESP is not set
# CONFIG_NETFILTER_XT_MATCH_HELPER is not set
# CONFIG_NETFILTER_XT_MATCH_LENGTH is not set
# CONFIG_NETFILTER_XT_MATCH_LIMIT is not set
# CONFIG_NETFILTER_XT_MATCH_MAC is not set
# CONFIG_NETFILTER_XT_MATCH_MARK is not set
# CONFIG_NETFILTER_XT_MATCH_MULTIPORT is not set
# CONFIG_NETFILTER_XT_MATCH_PKTTYPE is not set
# CONFIG_NETFILTER_XT_MATCH_QUOTA is not set
# CONFIG_NETFILTER_XT_MATCH_REALM is not set
CONFIG_NETFILTER_XT_MATCH_STATE=y
# CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set
# CONFIG_NETFILTER_XT_MATCH_STRING is not set
# CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set
# CONFIG_NETFILTER_XT_MATCH_U32 is not set
# CONFIG_NETFILTER_XT_MATCH_HASHLIMIT is not set

#
# IP: Netfilter Configuration
#
CONFIG_NF_CONNTRACK_IPV4=y
CONFIG_NF_CONNTRACK_PROC_COMPAT=y
# CONFIG_IP_NF_QUEUE is not set
CONFIG_IP_NF_IPTABLES=y
# CONFIG_IP_NF_MATCH_IPRANGE is not set
# CONFIG_IP_NF_MATCH_TOS is not set
# CONFIG_IP_NF_MATCH_RECENT is not set
# CONFIG_IP_NF_MATCH_ECN is not set
# CONFIG_IP_NF_MATCH_AH is not set
# CONFIG_IP_NF_MATCH_TTL is not set
# CONFIG_IP_NF_MATCH_OWNER is not set
# CONFIG_IP_NF_MATCH_ADDRTYPE is not set
# CONFIG_IP_NF_MATCH_STEALTH is not set
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_TARGET_REJECT=y
# CONFIG_IP_NF_TARGET_LOG is not set
# CONFIG_IP_NF_TARGET_ULOG is not set
CONFIG_NF_NAT=y
CONFIG_NF_NAT_NEEDED=y
# CONFIG_IP_NF_TARGET_MASQUERADE is not set
# CONFIG_IP_NF_TARGET_REDIRECT is not set
# CONFIG_IP_NF_TARGET_NETMAP is not set
# CONFIG_IP_NF_TARGET_SAME is not set
CONFIG_NF_NAT_FTP=y
CONFIG_NF_NAT_IRC=y
# CONFIG_NF_NAT_TFTP is not set
# CONFIG_NF_NAT_AMANDA is not set
# CONFIG_NF_NAT_PPTP is not set
# CONFIG_NF_NAT_H323 is not set
# CONFIG_NF_NAT_SIP is not set
CONFIG_IP_NF_MANGLE=y
# CONFIG_IP_NF_TARGET_TOS is not set
# CONFIG_IP_NF_TARGET_ECN is not set
# CONFIG_IP_NF_TARGET_TTL is not set
# CONFIG_IP_NF_RAW is not set
# CONFIG_IP_NF_ARPTABLES is not set
# CONFIG_BRIDGE is not set
# CONFIG_VLAN_8021Q is not set
# CONFIG_DECNET is not set
# CONFIG_LLC2 is not set
# CONFIG_IPX is not set
# CONFIG_ATALK is not set

#
# QoS and/or fair queueing
#
# CONFIG_NET_SCHED is not set

#
# Network testing
#
# CONFIG_NET_PKTGEN is not set
# CONFIG_HAMRADIO is not set
# CONFIG_IRDA is not set
# CONFIG_BT is not set

#
# Wireless
#
# CONFIG_CFG80211 is not set
# CONFIG_WIRELESS_EXT is not set
# CONFIG_IEEE80211 is not set
# CONFIG_RFKILL is not set

#
# Device Drivers
#

#
# Generic Driver Options
#
CONFIG_STANDALONE=y
CONFIG_PREVENT_FIRMWARE_BUILD=y
CONFIG_FW_LOADER=y
# CONFIG_SYS_HYPERVISOR is not set
# CONFIG_CONNECTOR is not set
# CONFIG_MTD is not set
# CONFIG_PARPORT is not set
# CONFIG_BLK_DEV is not set
# CONFIG_MISC_DEVICES is not set
# CONFIG_IDE is not set

#
# SCSI device support
#
CONFIG_RAID_ATTRS=y
CONFIG_SCSI=y
CONFIG_SCSI_DMA=y
# CONFIG_SCSI_NETLINK is not set
# CONFIG_SCSI_PROC_FS is not set

#
# SCSI support type (disk, tape, CD-ROM)
#
CONFIG_BLK_DEV_SD=y
# CONFIG_CHR_DEV_ST is not set
# CONFIG_CHR_DEV_OSST is not set
# CONFIG_BLK_DEV_SR is not set
# CONFIG_CHR_DEV_SG is not set
# CONFIG_CHR_DEV_SCH is not set

#
# Some SCSI devices (e.g. CD jukebox) support multiple LUNs
#
# CONFIG_SCSI_MULTI_LUN is not set
# CONFIG_SCSI_CONSTANTS is not set
# CONFIG_SCSI_LOGGING is not set
# CONFIG_SCSI_SCAN_ASYNC is not set

#
# SCSI Transports
#
# CONFIG_SCSI_SPI_ATTRS is not set
# CONFIG_SCSI_FC_ATTRS is not set
# CONFIG_SCSI_ISCSI_ATTRS is not set
# CONFIG_SCSI_SAS_LIBSAS is not set
CONFIG_SCSI_LOWLEVEL=y
# CONFIG_ISCSI_TCP is not set
CONFIG_BLK_DEV_3W_XXXX_RAID=y
# CONFIG_SCSI_3W_9XXX is not set
# CONFIG_SCSI_ACARD is not set
# CONFIG_SCSI_AACRAID is not set
# CONFIG_SCSI_AIC7XXX is not set
# CONFIG_SCSI_AIC7XXX_OLD is not set
# CONFIG_SCSI_AIC79XX is not set
# CONFIG_SCSI_AIC94XX is not set
# CONFIG_SCSI_DPT_I2O is not set
# CONFIG_SCSI_ADVANSYS is not set
# CONFIG_SCSI_ARCMSR is not set
# CONFIG_MEGARAID_NEWGEN is not set
# CONFIG_MEGARAID_LEGACY is not set
# CONFIG_MEGARAID_SAS is not set
# CONFIG_SCSI_HPTIOP is not set
# CONFIG_SCSI_BUSLOGIC is not set
# CONFIG_SCSI_DMX3191D is not set
# CONFIG_SCSI_EATA is not set
# CONFIG_SCSI_FUTURE_DOMAIN is not set
# CONFIG_SCSI_GDTH is not set
# CONFIG_SCSI_IPS is not set
# CONFIG_SCSI_INITIO is not set
# CONFIG_SCSI_INIA100 is not set
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
# CONFIG_SCSI_QLOGIC_1280 is not set
# CONFIG_SCSI_QLA_FC is not set
# CONFIG_SCSI_QLA_ISCSI is not set
# CONFIG_SCSI_LPFC is not set
# CONFIG_SCSI_DC390T is not set
# CONFIG_SCSI_NSP32 is not set
# CONFIG_SCSI_DEBUG is not set
# CONFIG_SCSI_SRP is not set
# CONFIG_ATA is not set
# CONFIG_MD is not set

#
# Fusion MPT device support
#
# CONFIG_FUSION is not set
# CONFIG_FUSION_SPI is not set
# CONFIG_FUSION_FC is not set
# CONFIG_FUSION_SAS is not set

#
# IEEE 1394 (FireWire) support
#

#
# An alternative FireWire stack is available with EXPERIMENTAL=y
#
# CONFIG_IEEE1394 is not set
# CONFIG_I2O is not set
# CONFIG_MACINTOSH_DRIVERS is not set
CONFIG_NETDEVICES=y
# CONFIG_NETDEVICES_MULTIQUEUE is not set
# CONFIG_DUMMY is not set
# CONFIG_BONDING is not set
# CONFIG_EQUALIZER is not set
# CONFIG_TUN is not set
# CONFIG_ARCNET is not set
# CONFIG_NET_ETHERNET is not set
CONFIG_NETDEV_1000=y
# CONFIG_ACENIC is not set
# CONFIG_DL2K is not set
# CONFIG_E1000 is not set
# CONFIG_NS83820 is not set
# CONFIG_HAMACHI is not set
# CONFIG_R8169 is not set
# CONFIG_SIS190 is not set
# CONFIG_SKGE is not set
# CONFIG_SKY2 is not set
# CONFIG_SK98LIN is not set
# CONFIG_VIA_VELOCITY is not set
CONFIG_TIGON3=y
# CONFIG_BNX2 is not set
# CONFIG_QLA3XXX is not set
# CONFIG_NETDEV_10000 is not set
# CONFIG_TR is not set

#
# Wireless LAN
#
# CONFIG_WLAN_PRE80211 is not set
# CONFIG_WLAN_80211 is not set
# CONFIG_WAN is not set
# CONFIG_FDDI is not set
# CONFIG_PPP is not set
# CONFIG_SLIP is not set
# CONFIG_NET_FC is not set
# CONFIG_NETPOLL is not set
# CONFIG_NET_POLL_CONTROLLER is not set
# CONFIG_ISDN is not set
# CONFIG_PHONE is not set

#
# Input device support
#
CONFIG_INPUT=y
# CONFIG_INPUT_FF_MEMLESS is not set
# CONFIG_INPUT_POLLDEV is not set

#
# Userland interfaces
#
CONFIG_INPUT_MOUSEDEV=y
# CONFIG_INPUT_MOUSEDEV_PSAUX is not set
CONFIG_INPUT_MOUSEDEV_SCREEN_X=1024
CONFIG_INPUT_MOUSEDEV_SCREEN_Y=768
# CONFIG_INPUT_JOYDEV is not set
# CONFIG_INPUT_TSDEV is not set
# CONFIG_INPUT_EVDEV is not set
# CONFIG_INPUT_EVBUG is not set

#
# Input Device Drivers
#
CONFIG_INPUT_KEYBOARD=y
CONFIG_KEYBOARD_ATKBD=y
# CONFIG_KEYBOARD_SUNKBD is not set
# CONFIG_KEYBOARD_LKKBD is not set
# CONFIG_KEYBOARD_XTKBD is not set
# CONFIG_KEYBOARD_NEWTON is not set
# CONFIG_KEYBOARD_STOWAWAY is not set
# CONFIG_INPUT_MOUSE is not set
# CONFIG_INPUT_JOYSTICK is not set
# CONFIG_INPUT_TABLET is not set
# CONFIG_INPUT_TOUCHSCREEN is not set
# CONFIG_INPUT_MISC is not set

#
# Hardware I/O ports
#
CONFIG_SERIO=y
CONFIG_SERIO_I8042=y
# CONFIG_SERIO_SERPORT is not set
# CONFIG_SERIO_CT82C710 is not set
# CONFIG_SERIO_PCIPS2 is not set
CONFIG_SERIO_LIBPS2=y
# CONFIG_SERIO_RAW is not set
# CONFIG_GAMEPORT is not set

#
# Character devices
#
CONFIG_VT=y
CONFIG_VT_CONSOLE=y
CONFIG_HW_CONSOLE=y
# CONFIG_VT_HW_CONSOLE_BINDING is not set
# CONFIG_SERIAL_NONSTANDARD is not set

#
# Serial drivers
#
CONFIG_SERIAL_8250=y
CONFIG_SERIAL_8250_CONSOLE=y
CONFIG_FIX_EARLYCON_MEM=y
CONFIG_SERIAL_8250_PCI=y
CONFIG_SERIAL_8250_NR_UARTS=2
CONFIG_SERIAL_8250_RUNTIME_UARTS=1
# CONFIG_SERIAL_8250_EXTENDED is not set

#
# Non-8250 serial port support
#
CONFIG_SERIAL_CORE=y
CONFIG_SERIAL_CORE_CONSOLE=y
# CONFIG_SERIAL_JSM is not set
CONFIG_UNIX98_PTYS=y
CONFIG_LEGACY_PTYS=y
CONFIG_LEGACY_PTY_COUNT=16
# CONFIG_IPMI_HANDLER is not set
# CONFIG_WATCHDOG is not set
# CONFIG_HW_RANDOM is not set
# CONFIG_NVRAM is not set
CONFIG_RTC=y
# CONFIG_R3964 is not set
# CONFIG_APPLICOM is not set
# CONFIG_AGP is not set
# CONFIG_DRM is not set
# CONFIG_MWAVE is not set
# CONFIG_PC8736x_GPIO is not set
# CONFIG_NSC_GPIO is not set
# CONFIG_CS5535_GPIO is not set
# CONFIG_RAW_DRIVER is not set
CONFIG_HANGCHECK_TIMER=y
CONFIG_DEVPORT=y
# CONFIG_I2C is not set

#
# SPI support
#
# CONFIG_SPI is not set
# CONFIG_SPI_MASTER is not set
# CONFIG_W1 is not set
# CONFIG_POWER_SUPPLY is not set
# CONFIG_HWMON is not set

#
# Multifunction device drivers
#
# CONFIG_MFD_SM501 is not set

#
# Multimedia devices
#
# CONFIG_VIDEO_DEV is not set
# CONFIG_DVB_CORE is not set
# CONFIG_DAB is not set

#
# Graphics support
#
# CONFIG_BACKLIGHT_LCD_SUPPORT is not set

#
# Display device support
#
# CONFIG_DISPLAY_SUPPORT is not set
# CONFIG_VGASTATE is not set
# CONFIG_VIDEO_OUTPUT_CONTROL is not set
# CONFIG_FB is not set

#
# Console display driver support
#
CONFIG_VGA_CONSOLE=y
# CONFIG_VGACON_SOFT_SCROLLBACK is not set
# CONFIG_VIDEO_SELECT is not set
CONFIG_DUMMY_CONSOLE=y

#
# Sound
#
# CONFIG_SOUND is not set
# CONFIG_HID_SUPPORT is not set
# CONFIG_USB_SUPPORT is not set
# CONFIG_MMC is not set
# CONFIG_NEW_LEDS is not set
# CONFIG_INFINIBAND is not set
# CONFIG_RTC_CLASS is not set

#
# DMA Engine support
#
CONFIG_DMA_ENGINE=y

#
# DMA Clients
#
CONFIG_NET_DMA=y

#
# DMA Devices
#
# CONFIG_INTEL_IOATDMA is not set
# CONFIG_VIRTUALIZATION is not set

#
# Userspace I/O
#
# CONFIG_UIO is not set

#
# File systems
#
CONFIG_EXT2_FS=y
# CONFIG_EXT2_FS_XATTR is not set
# CONFIG_EXT2_FS_XIP is not set
CONFIG_EXT3_FS=y
# CONFIG_EXT3_FS_XATTR is not set
CONFIG_JBD=y
# CONFIG_JBD_DEBUG is not set
# CONFIG_REISERFS_FS is not set
# CONFIG_JFS_FS is not set
# CONFIG_FS_POSIX_ACL is not set
# CONFIG_XFS_FS is not set
# CONFIG_OCFS2_FS is not set
# CONFIG_MINIX_FS is not set
# CONFIG_ROMFS_FS is not set
# CONFIG_INOTIFY is not set
CONFIG_QUOTA=y
# CONFIG_QFMT_V1 is not set
CONFIG_QFMT_V2=y
CONFIG_QUOTACTL=y
CONFIG_DNOTIFY=y
# CONFIG_AUTOFS_FS is not set
# CONFIG_AUTOFS4_FS is not set
# CONFIG_FUSE_FS is not set

#
# CD-ROM/DVD Filesystems
#
# CONFIG_ISO9660_FS is not set
# CONFIG_UDF_FS is not set

#
# DOS/FAT/NT Filesystems
#
# CONFIG_MSDOS_FS is not set
# CONFIG_VFAT_FS is not set
# CONFIG_NTFS_FS is not set

#
# Pseudo filesystems
#
CONFIG_PROC_FS=y
CONFIG_PROC_SYSCTL=y
CONFIG_SYSFS=y
CONFIG_TMPFS=y
# CONFIG_TMPFS_POSIX_ACL is not set
# CONFIG_HUGETLBFS is not set
# CONFIG_HUGETLB_PAGE is not set
CONFIG_RAMFS=y

#
# Miscellaneous filesystems
#
# CONFIG_HFSPLUS_FS is not set
# CONFIG_CRAMFS is not set
# CONFIG_VXFS_FS is not set
# CONFIG_HPFS_FS is not set
# CONFIG_QNX4FS_FS is not set
# CONFIG_SYSV_FS is not set
# CONFIG_UFS_FS is not set

#
# Network File Systems
#
# CONFIG_NFS_FS is not set
# CONFIG_NFSD is not set
# CONFIG_SMB_FS is not set
# CONFIG_CIFS is not set
# CONFIG_NCP_FS is not set
# CONFIG_CODA_FS is not set

#
# Partition Types
#
# CONFIG_PARTITION_ADVANCED is not set
CONFIG_MSDOS_PARTITION=y

#
# Native Language Support
#
# CONFIG_NLS is not set

#
# Kernel hacking
#
CONFIG_TRACE_IRQFLAGS_SUPPORT=y
# CONFIG_PRINTK_TIME is not set
# CONFIG_ENABLE_MUST_CHECK is not set
# CONFIG_MAGIC_SYSRQ is not set
# CONFIG_UNUSED_SYMBOLS is not set
# CONFIG_DEBUG_FS is not set
# CONFIG_HEADERS_CHECK is not set
# CONFIG_DEBUG_KERNEL is not set
CONFIG_DEBUG_BUGVERBOSE=y
CONFIG_EARLY_PRINTK=y
CONFIG_DOUBLEFAULT=y

#
# Security options
#

#
# Grsecurity
#
CONFIG_GRKERNSEC=y
# CONFIG_GRKERNSEC_LOW is not set
# CONFIG_GRKERNSEC_MEDIUM is not set
# CONFIG_GRKERNSEC_HIGH is not set
CONFIG_GRKERNSEC_CUSTOM=y

#
# Address Space Protection
#
CONFIG_GRKERNSEC_KMEM=y
CONFIG_GRKERNSEC_IO=y
CONFIG_GRKERNSEC_PROC_MEMMAP=y
CONFIG_GRKERNSEC_BRUTE=y
CONFIG_GRKERNSEC_HIDESYM=y

#
# Role Based Access Control Options
#
CONFIG_GRKERNSEC_ACL_HIDEKERN=y
CONFIG_GRKERNSEC_ACL_MAXTRIES=3
CONFIG_GRKERNSEC_ACL_TIMEOUT=30

#
# Filesystem Protections
#
CONFIG_GRKERNSEC_PROC=y
# CONFIG_GRKERNSEC_PROC_USER is not set
CONFIG_GRKERNSEC_PROC_USERGROUP=y
CONFIG_GRKERNSEC_PROC_GID=2523
CONFIG_GRKERNSEC_PROC_ADD=y
CONFIG_GRKERNSEC_LINK=y
CONFIG_GRKERNSEC_FIFO=y
CONFIG_GRKERNSEC_CHROOT=y
CONFIG_GRKERNSEC_CHROOT_MOUNT=y
CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
CONFIG_GRKERNSEC_CHROOT_PIVOT=y
CONFIG_GRKERNSEC_CHROOT_CHDIR=y
CONFIG_GRKERNSEC_CHROOT_CHMOD=y
CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
CONFIG_GRKERNSEC_CHROOT_MKNOD=y
CONFIG_GRKERNSEC_CHROOT_SHMAT=y
CONFIG_GRKERNSEC_CHROOT_UNIX=y
CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
CONFIG_GRKERNSEC_CHROOT_NICE=y
CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
CONFIG_GRKERNSEC_CHROOT_CAPS=y

#
# Kernel Auditing
#
# CONFIG_GRKERNSEC_AUDIT_GROUP is not set
# CONFIG_GRKERNSEC_EXECLOG is not set
CONFIG_GRKERNSEC_RESLOG=y
# CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
# CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
CONFIG_GRKERNSEC_AUDIT_MOUNT=y
CONFIG_GRKERNSEC_AUDIT_IPC=y
CONFIG_GRKERNSEC_SIGNAL=y
CONFIG_GRKERNSEC_FORKFAIL=y
CONFIG_GRKERNSEC_TIME=y
# CONFIG_GRKERNSEC_PROC_IPADDR is not set
# CONFIG_GRKERNSEC_AUDIT_TEXTREL is not set

#
# Executable Protections
#
CONFIG_GRKERNSEC_EXECVE=y
CONFIG_GRKERNSEC_SHM=y
CONFIG_GRKERNSEC_DMESG=y
# CONFIG_GRKERNSEC_TPE is not set

#
# Network Protections
#
CONFIG_GRKERNSEC_RANDNET=y
# CONFIG_GRKERNSEC_SOCKET is not set

#
# Sysctl support
#
# CONFIG_GRKERNSEC_SYSCTL is not set

#
# Logging Options
#
CONFIG_GRKERNSEC_FLOODTIME=10
CONFIG_GRKERNSEC_FLOODBURST=4

#
# PaX
#
CONFIG_PAX=y

#
# PaX Control
#
# CONFIG_PAX_SOFTMODE is not set
# CONFIG_PAX_EI_PAX is not set
# CONFIG_PAX_PT_PAX_FLAGS is not set
# CONFIG_PAX_NO_ACL_FLAGS is not set
CONFIG_PAX_HAVE_ACL_FLAGS=y
# CONFIG_PAX_HOOK_ACL_FLAGS is not set

#
# Non-executable pages
#
CONFIG_PAX_NOEXEC=y
CONFIG_PAX_PAGEEXEC=y
CONFIG_PAX_SEGMEXEC=y
# CONFIG_PAX_EMUTRAMP is not set
CONFIG_PAX_MPROTECT=y
# CONFIG_PAX_NOELFRELOCS is not set
CONFIG_PAX_KERNEXEC=y

#
# Address Space Layout Randomization
#
CONFIG_PAX_ASLR=y
CONFIG_PAX_RANDKSTACK=y
CONFIG_PAX_RANDUSTACK=y
CONFIG_PAX_RANDMMAP=y

#
# Miscellaneous hardening features
#
CONFIG_PAX_MEMORY_SANITIZE=y
CONFIG_PAX_MEMORY_UDEREF=y
# CONFIG_KEYS is not set
# CONFIG_SECURITY is not set
CONFIG_CRYPTO=y
CONFIG_CRYPTO_ALGAPI=y
# CONFIG_CRYPTO_MANAGER is not set
# CONFIG_CRYPTO_HMAC is not set
# CONFIG_CRYPTO_NULL is not set
# CONFIG_CRYPTO_MD4 is not set
# CONFIG_CRYPTO_MD5 is not set
# CONFIG_CRYPTO_SHA1 is not set
CONFIG_CRYPTO_SHA256=y
# CONFIG_CRYPTO_SHA512 is not set
# CONFIG_CRYPTO_WP512 is not set
# CONFIG_CRYPTO_TGR192 is not set
# CONFIG_CRYPTO_ECB is not set
# CONFIG_CRYPTO_CBC is not set
# CONFIG_CRYPTO_PCBC is not set
# CONFIG_CRYPTO_CRYPTD is not set
# CONFIG_CRYPTO_DES is not set
# CONFIG_CRYPTO_FCRYPT is not set
# CONFIG_CRYPTO_BLOWFISH is not set
# CONFIG_CRYPTO_TWOFISH is not set
# CONFIG_CRYPTO_TWOFISH_586 is not set
# CONFIG_CRYPTO_SERPENT is not set
# CONFIG_CRYPTO_AES is not set
# CONFIG_CRYPTO_AES_586 is not set
# CONFIG_CRYPTO_CAST5 is not set
# CONFIG_CRYPTO_CAST6 is not set
# CONFIG_CRYPTO_TEA is not set
# CONFIG_CRYPTO_ARC4 is not set
# CONFIG_CRYPTO_KHAZAD is not set
# CONFIG_CRYPTO_ANUBIS is not set
# CONFIG_CRYPTO_DEFLATE is not set
# CONFIG_CRYPTO_MICHAEL_MIC is not set
# CONFIG_CRYPTO_CRC32C is not set
# CONFIG_CRYPTO_CAMELLIA is not set
# CONFIG_CRYPTO_HW is not set

#
# Library routines
#
# CONFIG_CRC_CCITT is not set
# CONFIG_CRC16 is not set
# CONFIG_CRC_ITU_T is not set
# CONFIG_CRC32 is not set
# CONFIG_CRC7 is not set
# CONFIG_LIBCRC32C is not set
CONFIG_PLIST=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_IOPORT=y
CONFIG_HAS_DMA=y
CONFIG_GENERIC_HARDIRQS=y
CONFIG_GENERIC_IRQ_PROBE=y
CONFIG_X86_BIOS_REBOOT=y
CONFIG_KTIME_SCALAR=y
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby PaX Team » Tue Oct 30, 2007 6:31 pm

Hal9000 wrote:By the way, I just repaired that crashed table.
But I don't think it was the root cause of the problem, or was it?
a damaged DB can cause a crash if the parser code isn't carefully written, but that sounds unlikely in this case. can you decode the backtrace to see what symbols the addresses correspond to? or at least send me the mysqld binary (i think the top of the backtrace falls in the main executable)? other than that, you could try running without SANITIZE and see if it helps.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby Hal9000 » Wed Oct 31, 2007 3:53 am

sorry, but as this is a production machine i had to revert to the old kernel, so i cant do any backtrace now.
do you need the binary log files, or just the mysqld executable binary? and where should i send it/them to? :)
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby PaX Team » Wed Oct 31, 2007 11:37 am

Hal9000 wrote:sorry, but as this is a production machine i had to revert to the old kernel, so i cant do any backtrace now.
do you need the binary log files, or just the mysqld executable binary? and where should i send it/them to? :)
you don't need any particular kernel for a backtrace ;-), just a coredump and gdb. but i take it that didn't happen (mysql catches sigsegv), so the alternative is to manually decode the addresses into symbols, for that i need the binary itself (the logs you posted already contain the address info). as for where to send it to, my email address has always been on the PaX homepage ;-). one more thing, if the binary is stripped, i'll need the debug symbols, i think/hope that debian maintains them in a separate package that you can download (or just tell me which exact mysql package it was and i'll try to find it).
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby Hal9000 » Fri Nov 02, 2007 8:14 am

I am using this package: http://http.us.debian.org/debian/pool/m ... h1_all.deb
and this is the source package:
http://packages.debian.org/source/etch/mysql-dfsg-5.0

Tell me how i can help you more :)
hal
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby Hal9000 » Wed Nov 07, 2007 6:45 pm

any news on this? :)
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby bugboom » Fri Nov 09, 2007 3:53 am

Out of curiosity, does the virtual memory usage(displayed by "ps aux" in the VSZ field and "top" under the VIRT column) of MySQL increase over time, to far higher than it should be?
bugboom
 
Posts: 3
Joined: Thu Nov 01, 2007 10:08 am

Postby Hal9000 » Fri Nov 09, 2007 10:02 am

as it's a production machine and i reverted to the previous kernel to fix the problem, i cannot try to reproduce right now...
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby PaX Team » Mon Nov 12, 2007 3:25 pm

Hal9000 wrote:any news on this? :)
i'm still debugging a few problems that are all possibly linked, i'll let you know when there's something to test.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby PaX Team » Tue Nov 13, 2007 8:02 am

Hal9000 wrote:any news on this? :)
i've fixed the 'bad page state' error, i can't say if your bug is related to it, but if you have the time, you could give the new test patch a try.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby Hal9000 » Tue Nov 13, 2007 9:49 am

ok, i will try over the weekend.
just in case the problem still occurs, is there a way i can get more information for you before i reboot the kernel with the older kernel?
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Re: Problem with 2.6.23.1-grsec and MySQL 5.0.32-7etch1

Postby Hal9000 » Sun Jan 06, 2008 9:24 am

ok, i finally retried upgrading the kernel from my 2.6.21.6 to the latest 2.6.23.12 with latest grsec patch (from december).
the problem seems to have disappeared.
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Next

Return to grsecurity support

cron